CVE-2024-47168

Summary

CVE-2024-47168 is a vulnerability affecting the open-source Python package Gradio, used for quick prototyping. Despite setting the enable_monitoring flag to False, monitoring data remains accessible due to an improper disabling mechanism. An attacker or unauthorized user can gain access to sensitive application analytics by directly requesting the /monitoring endpoint. This issue is particularly concerning for users who intend to disable monitoring to prevent unauthorized access. To mitigate the risk, it is recommended that users upgrade to Gradio version 4.44 or later. No known workarounds are available for this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.